General
- Target 2026-06-27_1f157f37fcd5aaae78e7dd553185faa4_akira_glassworm_quasar-rat
- Size 6.3MB
- Sample260629-ldvk6shy71
- SHA256 9002d315da9e88a274d5fa43cd90aa9e4696a630bfe9e8dbf0b0b790d2ecd895
Score
10/10
Malware Config
Targets
-
- Target 2026-06-27_1f157f37fcd5aaae78e7dd553185faa4_akira_glassworm_quasar-rat
- Size 6.3MB
- SHA256 9002d315da9e88a274d5fa43cd90aa9e4696a630bfe9e8dbf0b0b790d2ecd895
Score10/10-
Windows security bypass
-
Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Sets file to hidden
Modifies file attributes to stop it showing in Explorer etc.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Windows security modification
-
Drops file in System32 directory
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Hide Artifacts
3Hidden Files and Directories
2Ignore Process Interrupts
1Impair Defenses
2Disable or Modify Tools
2Modify Registry
2